Everything was fine with 11.0.6200.754.
Few days ago I found out new SEP client (version 11.0.7000.975) in SEP manager and roll out it to all PC. After that clients can’t download updates from SEPM.
SEPM have last version (at the moment “2011-10-05 rev. 020”) but clients still have “2011-09-27” (27 sep it is date when all clients get 11.0.7000.975 version)
Also I have 4 clients that get this update later. And they get last def, but after that they can’t update defs. too.
OK. I thought it is because SEP manager still version 11.0.6200.754 so I update it to 11.0.7000.975 but it does not help =(
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
06.10.2011, 6:37:52 GMT -> LuComServer version: 3.3.0.102
06.10.2011, 6:37:52 GMT -> LiveUpdate Language: RUSSIAN
06.10.2011, 6:37:52 GMT -> LuComServer Sequence Number: 20110207
06.10.2011, 6:37:52 GMT -> OS: Windows XP Professional, Service Pack: 3, Major: 5, Minor: 1, Build: 2600 (32-bit)
06.10.2011, 6:37:52 GMT -> System Language:[0x0419], User Language:[0x0419]
06.10.2011, 6:37:52 GMT -> IE 7 Support
06.10.2011, 6:37:52 GMT -> ComCtl32 version: 6.0
06.10.2011, 6:37:52 GMT -> IP Addresses: 192.168.0.11, 192.168.28.1, 192.168.116.1
06.10.2011, 6:37:53 GMT -> Loading D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
06.10.2011, 6:37:53 GMT -> Opened the product inventory at "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
06.10.2011, 6:37:53 GMT -> Account launching LiveUpdate is not a logged in user's account
06.10.2011, 6:37:53 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
06.10.2011, 6:37:53 GMT -> LiveUpdate flag value for this run is 0
06.10.2011, 6:37:53 GMT -> **** Starting a Silent LiveUpdate Session ****
06.10.2011, 6:37:53 GMT -> *********************** Start of New LU Session ***********************
06.10.2011, 6:37:53 GMT -> The command line is -S -temphostex "D:\Program Files\Symantec\Symantec Endpoint Protection\ContentCache\{C25CEA47-63E5-447b-8D95-C79CAE13FF79}\80929016" -M{C25CEA47-63E5-447b-8D95-C79CAE13FF79} -updateoptout=yes
06.10.2011, 6:37:53 GMT -> ***** This LiveUpdate session is running in TempHostEx mode. *****
06.10.2011, 6:37:53 GMT -> TempHostEx moniker is {C25CEA47-63E5-447B-8D95-C79CAE13FF79}
06.10.2011, 6:37:53 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Silent Mode.
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win32 v11 with moniker {C60DC234-65F9-4674-94AE-62158EFCA433}.
06.10.2011, 6:37:53 GMT -> Starting Callback Proxy Worker thread.
06.10.2011, 6:37:53 GMT -> The callback proxy for moniker {C60DC234-65F9-4674-94AE-62158EFCA433} was successfully registered with LiveUpdate.
06.10.2011, 6:37:53 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win32 v11.
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win32 v11.
06.10.2011, 6:37:53 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:53 GMT -> The PreSession callback for product SESC Virus Definitions Win32 v11 completed with a result of 0x0
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC IPS Signatures Win32 with moniker {D3769926-05B7-4ad1-9DCF-23051EEE78E3}.
06.10.2011, 6:37:53 GMT -> The callback proxy for moniker {D3769926-05B7-4ad1-9DCF-23051EEE78E3} was successfully registered with LiveUpdate.
06.10.2011, 6:37:53 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC IPS Signatures Win32.
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC IPS Signatures Win32.
06.10.2011, 6:37:53 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:53 GMT -> The PreSession callback for product SESC IPS Signatures Win32 completed with a result of 0x0
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to launch a new callback proxy process for product Symantec Security Content B1 with moniker {E5A3EBEE-D580-421e-86DF-54C0B3739522}.
06.10.2011, 6:37:53 GMT -> The callback proxy for moniker {E5A3EBEE-D580-421e-86DF-54C0B3739522} was successfully registered with LiveUpdate.
06.10.2011, 6:37:53 GMT -> LiveUpdate successfully launched a new callback proxy process for product Symantec Security Content B1.
06.10.2011, 6:37:53 GMT -> LiveUpdate is about to execute a PreSession callback for product Symantec Security Content B1.
06.10.2011, 6:37:53 GMT -> ProductRegCom/luProductReg(PID=5884/TID=5912): Successfully created an instance of an luProductReg object!
06.10.2011, 6:37:53 GMT -> ProductRegCom/luProductReg(PID=5884/TID=5912): Path for calling process executable is D:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
06.10.2011, 6:37:53 GMT -> ProductRegCom/luProductReg(PID=5884/TID=5912): Setting property for Moniker = {E5A3EBEE-D580-421e-86DF-54C0B3739522}, PropertyName = SEQ.CURDEFS, Value = 110926004
06.10.2011, 6:37:53 GMT -> ProductRegCom/luProductReg(PID=5884/TID=5912): Destroyed luProductReg object.
06.10.2011, 6:37:53 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:53 GMT -> The PreSession callback for product Symantec Security Content B1 completed with a result of 0x0
06.10.2011, 6:37:53 GMT -> Successfully released callback {6FDEE0F0-ECD7-423C-BD1C-525ECBAC7E1B}
06.10.2011, 6:37:54 GMT -> LiveUpdate has called the last callback for product Symantec Security Content B1, so LiveUpdate is informing the callback proxy that it can exit.
06.10.2011, 6:37:54 GMT -> LiveUpdate is about to launch a new callback proxy process for product Symantec Security Content A1 with moniker {812CD25E-1049-4086-9DDD-A4FAE649FBDF}.
06.10.2011, 6:37:54 GMT -> The callback proxy executable for product {E5A3EBEE-D580-421e-86DF-54C0B3739522} is exiting with no errors
06.10.2011, 6:37:54 GMT -> The callback proxy for moniker {812CD25E-1049-4086-9DDD-A4FAE649FBDF} was successfully registered with LiveUpdate.
06.10.2011, 6:37:54 GMT -> LiveUpdate successfully launched a new callback proxy process for product Symantec Security Content A1.
06.10.2011, 6:37:54 GMT -> LiveUpdate is about to execute a PreSession callback for product Symantec Security Content A1.
06.10.2011, 6:37:54 GMT -> ProductRegCom/luProductReg(PID=5740/TID=1976): Successfully created an instance of an luProductReg object!
06.10.2011, 6:37:54 GMT -> ProductRegCom/luProductReg(PID=5740/TID=1976): Path for calling process executable is D:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
06.10.2011, 6:37:54 GMT -> ProductRegCom/luProductReg(PID=5740/TID=1976): Setting property for Moniker = {812CD25E-1049-4086-9DDD-A4FAE649FBDF}, PropertyName = SEQ.CURDEFS, Value = 110926004
06.10.2011, 6:37:54 GMT -> ProductRegCom/luProductReg(PID=5740/TID=1976): Destroyed luProductReg object.
06.10.2011, 6:37:54 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:54 GMT -> The PreSession callback for product Symantec Security Content A1 completed with a result of 0x0
06.10.2011, 6:37:54 GMT -> Successfully released callback {6FDEE0F0-ECD7-423C-BD1C-525ECBAC7E1B}
06.10.2011, 6:37:54 GMT -> LiveUpdate has called the last callback for product Symantec Security Content A1, so LiveUpdate is informing the callback proxy that it can exit.
06.10.2011, 6:37:54 GMT -> Progress Update: TRYING_HOST: HostName: "D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016" URL: "D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016" HostNumber: 0
06.10.2011, 6:37:54 GMT -> In TempHostEx mode, LiveUpdate will retrieve updates from this location: D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016
06.10.2011, 6:37:54 GMT -> Check for updates to: Product: Symantec Known Application System, Version: 1.5.0, Language: SymAllLanguages. Mini-TRI file name: symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip
06.10.2011, 6:37:54 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
06.10.2011, 6:37:54 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 1 Downloading Mini-TRI files
06.10.2011, 6:37:54 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
06.10.2011, 6:37:54 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
06.10.2011, 6:37:54 GMT -> The callback proxy executable for product {812CD25E-1049-4086-9DDD-A4FAE649FBDF} is exiting with no errors
06.10.2011, 6:37:54 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Full Download Path: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip" HR: 0x0
06.10.2011, 6:37:54 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
06.10.2011, 6:37:54 GMT -> LiveUpdate copied the Mini-TRI file from D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip to D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip
06.10.2011, 6:37:54 GMT -> Progress Update: HOST_SELECTED: Host IP: "192.168.0.11" URL: "D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79}\80929016" HostNumber: 4294967295
06.10.2011, 6:37:54 GMT -> Attempting to load SymCrypt...
06.10.2011, 6:37:54 GMT -> SymCrypt.dll does not exist.
06.10.2011, 6:37:54 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server D:\PROGRAM FILES\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\CONTENTCACHE\{C25CEA47-63E5-447B-8D95-C79CAE13FF79} at path D:\PROGRAM%20FILES\SYMANTEC\SYMANTEC%20ENDPOINT%20PROTECTION\CONTENTCACHE\%7BC25CEA47-63E5-447B-8D95-C79CAE13FF79%7D\80929016 via a LAN connection. The server connection connected with a return code of 200, Файл TRI загружен успешно
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Dest Folder: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.grd"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.sig"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "syknapps_engine.zip.dat"
06.10.2011, 6:37:54 GMT -> Progress Update: SECURITY_SIGNATURE_MATCHED: GuardFile: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\liveupdt.grd"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Dest Folder: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808", HR: 0x0
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Dest Folder: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.tri"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "syknapps_engine.zip.dat"
06.10.2011, 6:37:54 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Dest Folder: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808", HR: 0x0
06.10.2011, 6:37:54 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\liveupdt.tri"
06.10.2011, 6:37:54 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "D:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Tri808\syknapps_engine.zip.dat"
06.10.2011, 6:37:54 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "1"
06.10.2011, 6:37:54 GMT -> ********* Finished Finding Available Updates *********
06.10.2011, 6:37:54 GMT -> LiveUpdate did not find any new updates for the given products.
06.10.2011, 6:37:54 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install. The LiveUpdate session exited with a return code of 100, Операция LiveUpdate выполнена успешно. Для установленных продуктов нет обновлений.
06.10.2011, 6:37:54 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win32 v11.
06.10.2011, 6:37:54 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:54 GMT -> The PostSession callback for product SESC Virus Definitions Win32 v11 completed with a result of 0x0
06.10.2011, 6:37:54 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
06.10.2011, 6:37:54 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win32 v11, so LiveUpdate is informing the callback proxy that it can exit.
06.10.2011, 6:37:54 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC IPS Signatures Win32.
06.10.2011, 6:37:54 GMT -> The callback proxy executable for product {C60DC234-65F9-4674-94AE-62158EFCA433} is exiting with no errors
06.10.2011, 6:37:54 GMT -> The callback proxy finished executing the callback with a result code of 0x0
06.10.2011, 6:37:54 GMT -> The PostSession callback for product SESC IPS Signatures Win32 completed with a result of 0x0
06.10.2011, 6:37:54 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
06.10.2011, 6:37:54 GMT -> LiveUpdate has called the last callback for product SESC IPS Signatures Win32, so LiveUpdate is informing the callback proxy that it can exit.
06.10.2011, 6:37:54 GMT -> The callback proxy executable for product {D3769926-05B7-4ad1-9DCF-23051EEE78E3} is exiting with no errors
06.10.2011, 6:37:55 GMT -> *********************** End of LU Session ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////